Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Os3QlUYbdFq0K0jfy2h1lAzF7Kw.roa
File: Os3QlUYbdFq0K0jfy2h1lAzF7Kw.roa (raw, json)
Hash identifier: dv4jLXoB4R2wzLCQyGd102SWZ7DgF10gLWRTttEQbhM=
Subject key identifier: 3A:CD:D0:95:46:1B:74:5A:B4:2B:48:DF:CB:68:75:94:0C:C5:EC:AC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E6A3833296266CBE0D727628A3E1C018F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Os3QlUYbdFq0K0jfy2h1lAzF7Kw.roa
Signing time: Wed 27 May 2026 16:15:28 +0000
ROA not before: Wed 27 May 2026 16:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214083
IP address blocks: 31.77.108.0/24 maxlen: 24
31.77.208.0/24 maxlen: 24
31.77.210.0/24 maxlen: 24
31.77.213.0/24 maxlen: 24
31.77.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:38:33:29:62:66:cb:e0:d7:27:62:8a:3e:1c:01:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 27 16:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3acdd095461b745ab42b48dfcb6875940cc5ecac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:63:cc:9b:bc:7f:28:79:f1:72:1c:de:a1:
27:16:21:87:ae:e6:b9:df:01:60:fd:92:74:65:41:
7f:f2:8f:f8:bd:86:6a:6d:5e:9f:b6:8d:ee:38:1c:
a6:5b:c8:ce:c8:5f:58:f1:24:d2:8e:c2:83:d8:d9:
f5:cf:df:46:61:7e:1a:32:51:29:10:37:3c:71:80:
fb:5a:74:94:9d:b6:2f:ed:1f:cc:6c:7e:8b:6e:fb:
c9:1d:be:27:b2:6e:65:7f:42:fc:49:86:d7:f1:f6:
ee:91:9a:42:6c:d2:9a:ba:47:a2:ae:b4:41:78:cd:
6d:f1:00:f0:ad:15:b7:21:a9:14:b8:ba:29:30:2a:
3a:d2:ac:82:4e:45:95:eb:df:b1:bb:e1:fc:88:67:
d7:c3:03:65:2b:8b:0c:65:8e:f9:13:b3:a1:a7:06:
e3:90:41:b6:a7:de:f9:d0:10:cd:4a:42:5e:0b:38:
9e:6d:c8:85:13:f0:1f:ff:0b:d5:c9:f2:a0:52:82:
85:0b:f4:69:20:dd:eb:9d:49:c2:c8:05:e3:85:de:
ed:de:9f:a7:1a:a5:7a:3c:24:98:79:a0:be:4e:68:
b5:44:24:fe:33:a6:5f:90:fa:bb:cc:dc:d2:99:40:
65:2a:dc:cc:f5:9d:d8:9a:9a:1a:26:9c:0d:a3:bf:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:D0:95:46:1B:74:5A:B4:2B:48:DF:CB:68:75:94:0C:C5:EC:AC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Os3QlUYbdFq0K0jfy2h1lAzF7Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.108.0/24
31.77.208.0/24
31.77.210.0/24
31.77.213.0/24
31.77.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c6:f0:2b:13:35:47:cc:ec:26:c0:cd:a0:6e:39:8e:25:81:
21:7a:a1:78:37:3e:35:18:7e:5e:b9:7b:e2:f7:dd:20:ce:b3:
c6:e3:05:56:5d:3e:1f:61:15:b6:74:97:a7:a1:27:df:bd:59:
ea:21:ca:8a:c9:83:b9:4e:d1:51:2e:ba:f7:e4:01:e4:2b:0d:
17:27:6a:86:b6:f1:ef:ca:3b:c7:20:6b:97:3a:17:7d:57:40:
ff:f7:43:94:4b:13:12:07:45:f5:a9:32:24:e7:38:1d:f3:ef:
a2:40:60:ff:37:93:23:b1:eb:65:13:b7:f0:02:b5:35:72:b9:
5d:4c:a4:23:c7:5f:35:0f:bf:3c:b0:ed:9d:94:50:73:68:13:
7a:c1:46:54:c7:71:e8:19:fb:37:71:12:94:c9:b9:80:69:29:
f1:fc:49:8a:70:e9:74:78:24:ff:93:3c:ea:fe:4b:e3:90:cf:
21:67:74:b2:c4:ec:bf:a1:a9:39:a0:4f:50:2d:36:de:3f:18:
94:ae:d8:17:e9:f8:17:bb:76:67:69:22:4a:d6:95:df:46:53:
f8:93:90:31:19:51:ba:a5:cf:34:66:f7:b4:95:03:a5:a5:54:
c8:07:26:97:d2:9b:ea:98:8c:ab:66:45:1f:b8:e0:05:fb:51:
e3:36:d3:b3
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ5qODMpYmbL4NcnYoo+HAGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTI3MTYxNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWNkZDA5NTQ2MWI3NDVhYjQyYjQ4ZGZjYjY4NzU5NDBjYzVlY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwxjzJu8fyh58XIc3qEnFiGHrua5
3wFg/ZJ0ZUF/8o/4vYZqbV6fto3uOBymW8jOyF9Y8STSjsKD2Nn1z99GYX4aMlEp
EDc8cYD7WnSUnbYv7R/MbH6LbvvJHb4nsm5lf0L8SYbX8fbukZpCbNKaukeirrRB
eM1t8QDwrRW3IakUuLopMCo60qyCTkWV69+xu+H8iGfXwwNlK4sMZY75E7Ohpwbj
kEG2p9750BDNSkJeCziebciFE/Af/wvVyfKgUoKFC/RpIN3rnUnCyAXjhd7t3p+n
GqV6PCSYeaC+Tmi1RCT+M6ZfkPq7zNzSmUBlKtzM9Z3YmpoaJpwNo7/p8wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDrN0JVGG3RatCtI38todZQMxeysMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvT3MzUWxVWWJkRnEwSzBqZnkyaDFsQXpGN0t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAH01sAwQA
H03QAwQAH03SAwQAH03VAwQAH03mMA0GCSqGSIb3DQEBCwUAA4IBAQCyxvArEzVH
zOwmwM2gbjmOJYEheqF4Nz41GH5euXvi990gzrPG4wVWXT4fYRW2dJenoSffvVnq
IcqKyYO5TtFRLrr35AHkKw0XJ2qGtvHvyjvHIGuXOhd9V0D/90OUSxMSB0X1qTIk
5zgd8++iQGD/N5MjsetlE7fwArU1crldTKQjx181D788sO2dlFBzaBN6wUZUx3Ho
Gfs3cRKUybmAaSnx/EmKcOl0eCT/kzzq/kvjkM8hZ3SyxOy/oak5oE9QLTbePxiU
rtgX6fgXu3ZnaSJK1pXfRlP4k5AxGVG6pc80Zve0lQOlpVTIByaX0pvqmIyrZkUf
uOAF+1HjNtOz
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:48 2026 by rpki-client